Welcome to GeekPolice!

We truly love technology and security and we want to share it with the world. Recognize the excitement of technology here daily:☞Security Discussion on malware, ransomware, and much more!
☞24/7 hard- and software tech support (+mobile!)
☞Virus and malware removal support
☞Business & Enterprise Users/Endpoints Now Supported!!
☞Tons of tutorials, guides and solutions
☞The very finest of our voluntary Support Staff
☞Much, much more FREE!

I received the same error code as a previous poster. I was unable to getinto windows in any safe mode. I followed the process you gave to that poster (the OTL PE scan), except for the drivers, I picked ALL (since non-microsoft was not an option).

It said the post was too long so I will try to reply to this post with that info.

1. If you are using Firefox, make sure that your download settings are as follows:

* Tools->Options->Main tab * Set to "Always ask me where to Save the files".

2. During the download, rename Combofix to Combo-Fix as follows:

3. It is important you rename Combofix during the download, but not after.4. Please do not rename Combofix to other names, but only to the one indicated.5. Close any open browsers.6. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

We need to disable your local AV (Anti-virus) before running Combofix.

See HERE for how to disable your AV.

Double click on ComboFix.exe.

Follow the prompts. NOTE:

ComboFix will check to see if the Microsoft Windows Recovery Console is installed.***It's strongly recommended to have the Recovery Console installed before doing any malware removal.***

**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will automatically proceed with its scan.

The Recovery Console provides a recovery/repair mode should a problem occur during a Combofix run.

Allow ComboFix to download the Recovery Console.

Accept the End-User License Agreement.

The Recovery Console will be installed.

You will then get this next prompt that asks if you want to continue the malware scan, select yes

Allow combofix to run

Post C:\combofix.txt back here.

Note:Do not mouseclick combofix's window whilst it's running. That may cause it to stall.

Thanks for the quick response, but...This doesn't seem work, since I get the "blue screen of death" before I can get to my desktop.I tried to put combofix on the Reatogo desktop but it won't run from there.

Return to OTL, right click in the "Custom Scans/Fixes" window (under the light green bar) and choose Paste.

Click the red Run Fix button.

A fix log in Notepad will appear. Copy the contents of the fix log to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy), and paste it in your next reply.

Close OTL.exe

If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes.

I did the above, then restarted the computer.Still getting "the blue screen of death."

Here's the info you asked for:========== OTL ==========Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} deleted successfully.Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064}\ not found.Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ deleted successfully.Registry value HKEY_USERS\Al_Shimkus_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\saz15AE.tmp.exe deleted successfully.Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\mljkjhg\ deleted successfully.Registry value HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Lsa\\Authentication Packages:C:\WINDOWS\system32\ssqrs.dll deleted successfully.C:\WINDOWS\system32\ppoohmrd.ini moved successfully.C:\WINDOWS\system32\cchbjrlq.ini moved successfully.C:\WINDOWS\system32\nuwpxdtw.ini moved successfully.C:\WINDOWS\system32\onnufqea.ini moved successfully.C:\WINDOWS\system32\ibllobrm.ini moved successfully.C:\WINDOWS\system32\poqiiedk.ini moved successfully.C:\WINDOWS\system32\yljsbwia.ini moved successfully.C:\WINDOWS\system32\dreybldc.ini moved successfully.C:\WINDOWS\system32\gvcyjlbu.ini moved successfully.C:\WINDOWS\system32\onahfeck.ini moved successfully.C:\WINDOWS\system32\hbewemjg.ini moved successfully.C:\WINDOWS\system32\xswbyloo.ini moved successfully.C:\WINDOWS\system32\nyhsxkxr.ini moved successfully.C:\WINDOWS\system32\voydphwc.ini moved successfully.C:\WINDOWS\system32\dthshdds.ini moved successfully.C:\WINDOWS\system32\jqlhdicp.ini moved successfully.C:\WINDOWS\system32\damytudo.ini moved successfully.C:\WINDOWS\system32\ujjlvxwt.ini moved successfully.C:\WINDOWS\system32\nfnkheel.ini moved successfully.C:\WINDOWS\system32\iwnkvgcb.ini moved successfully.C:\WINDOWS\system32\coorenhi.ini moved successfully.C:\WINDOWS\system32\hyoxjcsw.ini moved successfully.C:\WINDOWS\system32\yavqmmwm.ini moved successfully.C:\WINDOWS\system32\khumlnyu.ini moved successfully.C:\WINDOWS\system32\mfoqcrej.ini moved successfully.C:\WINDOWS\system32\njfjyppw.ini moved successfully.C:\WINDOWS\system32\spinpjpv.ini moved successfully.C:\WINDOWS\system32\ssakkwuu.ini moved successfully.C:\WINDOWS\system32\oiiseemj.ini moved successfully.========== FILES ==========C:\WINDOWS\tasks\At1.job moved successfully.C:\WINDOWS\tasks\At10.job moved successfully.C:\WINDOWS\tasks\At11.job moved successfully.C:\WINDOWS\tasks\At12.job moved successfully.C:\WINDOWS\tasks\At13.job moved successfully.C:\WINDOWS\tasks\At14.job moved successfully.C:\WINDOWS\tasks\At15.job moved successfully.C:\WINDOWS\tasks\At16.job moved successfully.C:\WINDOWS\tasks\At17.job moved successfully.C:\WINDOWS\tasks\At18.job moved successfully.C:\WINDOWS\tasks\At19.job moved successfully.C:\WINDOWS\tasks\At2.job moved successfully.C:\WINDOWS\tasks\At20.job moved successfully.C:\WINDOWS\tasks\At21.job moved successfully.C:\WINDOWS\tasks\At22.job moved successfully.C:\WINDOWS\tasks\At23.job moved successfully.C:\WINDOWS\tasks\At24.job moved successfully.C:\WINDOWS\tasks\At3.job moved successfully.C:\WINDOWS\tasks\At4.job moved successfully.C:\WINDOWS\tasks\At5.job moved successfully.C:\WINDOWS\tasks\At6.job moved successfully.C:\WINDOWS\tasks\At7.job moved successfully.C:\WINDOWS\tasks\At8.job moved successfully.C:\WINDOWS\tasks\At9.job moved successfully.

I DL'd Combo-fix on another computer.transfered it to the problem computer on a USB drive.Moved the exe to the reatgo desktop and double clicked.

It asked "which user account do you want to use to run this program?"current user (\Reatogo$)and had a check box to "Protect my computer and data from unauthorized program activity (which was already checked)

I clicked OK

Then it said Errors encountered while performing the operationLook at the information window for more details

When I click OK, nothing happens

There is a ComboFix installation counter frozen on the screen.It never started.